Rights of Individuals 

If Cardiff Metropolitan University is processing information about you, then you have a number of rights in relation to that information. The:

  • Right of access
  • Right to prevent processing
  • Rights concerning automated decisions
  • Right to compensation
  • Right to correct or erase inaccurate data

The University will normally ask you for proof of your identity if you contact the University about any of these rights.

If you would like more information about your rights or want to contact Cardiff Metropolitan University to assert a right, the University would encourage you to get in touch with:

Siân Newton
Data Protection Officer
Secretariat Unit 
Cardiff Metropolitan University
Llandaff Campus
Western Avenue
029 20 41 6076

Right of Access

You have the right:

  • To be informed if the University is processing personal data about you.
  • (If so) To be given a description of the data, the purposes for which the data are being processed and to whom it may be disclosed.
  • To have a copy of your personal data and any information that we have as to the source of the data.
  • To be informed of the logic behind some automated decisions.
  • If you would like to see or have a copy of any data about yourself then please have a look at the guide to requesting information from Cardiff Metropolitan University. 

You can also download and print the guide as a Word document  How to Request Information from Cardiff Metropolitan University.

If you are a student or a Cardiff Met alumni the Student Fair Processing Notice, which gives details of the information we are processing about you, is available by clicking here.

Right to Prevent Processing

You have the right to prevent the University processing your personal data if it is causing, or is likely to cause, substantial damage or distress to you or to someone else.  If anything Cardiff Metropolitan University is doing with your personal data is causing loss, harm, real upset or real anguish, then you should write to us to tell us:

  • What processing you want stopped, or not begun.
  • Why the processing is causing unwarranted damage or distress.
  • When you want to stop the processing.
  • You also have the right to prevent the processing of your personal data for direct marketing. 

Again, you should write to the University to tell the University to stop (including when to stop).

Rights Concerning Automated Decisions

You have the right to ensure that most decisions which significantly affect you are not made solely by automatic means and to ask the University to reconsider a decision that has already been taken. If you want to assert this right, you should put it in writing.

Right to Compensation

You have the right to claim compensation if the University has failed to comply with any of the requirements of the Act and you have suffered damage, or damage and distress, as a result. You can also claim for distress alone in certain cases.  If you feel that you have a claim for compensation and want to attempt to resolve the situation informally you should first explain the circumstances of your claim in writing. You also have the right to apply to the Court for compensation.

Right to Correct or Erase Inaccurate Data

If you believe the University is holding incorrect information about you, the University would be happy to make any necessary corrections or even erase the information, although you have the right to apply to a Court to have inaccurate data about you rectified, blocked, erased or destroyed.  This right also extends to any opinions based on the inaccurate data.